Management control of pharmaceutical substances

ABSTRACT

A computerised identity matching management process for the supply of a pharmaceutical substance to an authorised person. The process identifies a person who is requesting the supply of the substance which includes the steps of a management computer receiving a request, from capture apparatus waiting to commence a biometric capture process representative of the person to initiate the capture process. The management computer responds to the request to return a message to the capture apparatus at a first instant in time, the message containing a unique code, and receipt of the message containing the code at the capture apparatus causes initiation of the capture process. The management computer, after returning the message, receives a captured biometric representative of the person from the capture apparatus coded with the code, at a second instant in time. The management computer operates, when the second instant is less than a predetermined time later than the first instant, to decode the captured biometric and initiate a matching process to find a match for the decoded captured biometric against stored biometric records and to retrieve an identification code representative of the person when a match is found. The management computer retrieves a date stamp and uses the identification code to retrieve a data record of the person which includes at least a substance the person is prescribed, a quantity in which the substance is to be supplied and a date at which the substance is to be supplied and determines whether the date stamp matches the date at which the substance is to be supplied. If a match is determined, the substance is supplied in the prescribed quantity and information is recorded to form a record to update the supply of the substance to the person.

TECHNICAL FIELD

The invention concerns a computerised identity matching managementprocess and system for the authorised supply of a pharmaceuticalsubstance to an individual.

BACKGROUND ART

The concept of iris recognition was developed and patented by IridianTechnologies Inc, and their concept patent U.S. Pat. No. 4,641,349describes the use of the iris to identify individuals. U.S. Pat. No.5,291,560 describes a method by which a biometric, including the irispattern of an individual, can be used as the basis of an identificationtechnique.

Argus Solutions Pty Ltd, developed a computerised identity matchingmanagement process and associated system. Their patent applicationPCT/AU02/01579 describes managing the provision of identity matchingservices, for instance to enable users to gain appropriate access toservice provider's facilities.

DISCLOSURE OF INVENTION

In a first aspect, the invention is a computerised identity matchingmanagement process for the supply of a pharmaceutical substance to anauthorised person, the process comprising the steps of:

-   -   identifying a person who is requesting the supply of the        substance, comprising the steps of:        -   a management computer receiving a request, from capture            apparatus waiting to commence a biometric capture process            representative of the person to initiate the capture            process;        -   the management computer responding to the request to return            a message to the capture apparatus at a first instant in            time, the message containing a unique code, and where            receipt of the message containing the code at the capture            apparatus causes initiation of the capture process;        -   the management computer, after returning the message,            receiving a captured biometric representative of the person            from the capture apparatus coded with the code, at a second            instant in time; and        -   the management computer operating, when the second instant            is less than a predetermined time later than the first            instant, to decode the captured biometric and initiate a            matching process to find a match for the decoded captured            biometric against stored biometric records and to retrieve            an identification code representative of the person when a            match is found;    -   retrieving a date stamp and using the identification code to        retrieve a stored data record of the person which includes at        least a substance the person is prescribed, a quantity in which        the substance is to be supplied and a date at which the        substance is to be supplied;    -   determining whether the date stamp matches the date at which the        substance is to be supplied, and    -   if a match is determined, supplying the substance in the        prescribed quantity and recording information to form a record        to update the supply of the substance to the person.

The pharmaceutical substance may be methadone, levo acetyl methadone(LAAM), buprenorphine, or the like. The authorised person to whom asubstance may be supplied, may therefore be a patient. The substance maybe a controlled substance used in accordance with a pharmocotherapyprogram. The patient may be using the substance in a therapeutic manneras a way to reduce harm associated with a dependence on mood alteringchemicals.

The matching process may include generating a template image of thedecoded captured biometric for matching against stored records.

The stored biometric records may include, but not be limited to, abiometric enrol template of the left iris, a biometric enrol template ofthe right iris, and a unique customer number. The stored biometricrecords may further include a portrait image of the individual. Allbiometric records maybe securely stored using a certified cryptographicalgorithm such as 3DES. All biometric records maybe uniquely keyed tothe hardware on which the database resides using a transformationprocess. There maybe stored biometric records for all individuals whointeract with the system from groups of individuals including, but notlimited to patients, doctors, clinicians, prescribers, and systemsadministrators.

The biometric records may be stored in a database in the management'scomputer cache.

The data records may be logically separate from the biometric records.

The data records may be physically separate from the biometric records.

The date stamp may be retrieved from the management computer's internalclock.

The stored data records may include, but not be limited to, any one ormore of a patient database, a prescriber database, a drug registerdatabase, and a supplier database.

The patient database may include patient details, an assessment recordand prescription details associated with the patient details. Forinstance, the patient and prescription details for each patient mayinclude a ‘name and address field’, a customer identification numberfield which is the same number that resides in the stored biometricrecords, a ‘create date field’, a prescription ‘issue date field’ whichindicates the date at which the prescription was prescribed, a‘prescribed drug field’ to record one or more substances prescribed tothe particular patient; a ‘strength &/or quantity field’ of eachsubstances prescribed to the particular patient; a ‘frequency oftreatment field’ which lists the dates, and if necessary the times, atwhich the each prescribed drug may be supplied to the particularpatient; a ‘drug supply received field’ which indicates the dates onwhich the prescribed drug has been supplied; and a ‘prescriptionduration field’ which specifies the date at which supply of theprescribed drug is to cease.

The prescriber database may include a prescriber ‘name and addressfield’, a ‘create date field’ for the date on which a prescription wasprescribed and who the prescription was made out to, and a customeridentification number field which is the same number that resides in thestored biometric records.

The assessment database may record details of the patient includingdetails of the patients past and current medical condition. Such anassessment may be made before any patient is prescribed medication.

The drug register database may be a governmental requirement and may beused for stock taking purposes. For example for particular types ofsubstances such as methadone, suppliers such as pharmacists may berequired by law to maintain a register of the total daily supply of thedrug. Therefore, the database may include information relating to thequantity of methadone received and supplied on a daily basis, or anyother time convenient or required period. The database may furtherinclude fields such as the name and address of the supplier of thesubstance received into stock; the name and address of the persons towhom the substance was supplied; the original prescription referencenumber of each person to whom the substance was supplied; the name ofthe prescriber; and the identity of the person making the entry.

Each of the databases may be linked so that, for example, for anypatient, the prescriber or supplier records which have common fields maybe easily retrieved for reference.

The method may further include the step of enrolling a person into aprogram so that the person is authorised to be receive the substance. Insuch an example, the step of enrolling the person may include:

-   -   a management computer receiving a request, from capture        apparatus waiting to commence a biometric capture process        representative of the person to initiate the capture process;    -   the management computer responding to the request to return a        message to the capture apparatus at a first instant in time, the        message containing a unique code, and where receipt of the        message containing the code at the capture apparatus causes        initiation of the capture process;    -   the management computer, after returning a message, receiving a        captured biometric representative of the person from the capture        apparatus coded with the code, at a second instant in time;    -   the management computer operating, when the second instant is        less than a predetermined time later than the first instant, to        decode the captured biometric;    -   generating an identification code representative of the person;        and    -   storing a biometric record of the person's captured biometric        with the identification code.

Prior to storing a biometric record of the person's captured biometricthe management computer may perform a fraud check to ensure the personis not already enrolled on the system.

Having decoded the captured biometric, the management computer maytransform the captured biometric into an enrolment template in order tostore a record of the person's captured biometric.

Similarly, the method may include the step of identifying the prescriberwho is prescribing the substance and identifying the supplier whosupplies the substance to the person. The supplier may be a pharmacist.

The step of identifying the prescriber may include the steps of:

-   -   a management computer receiving a request, from capture        apparatus waiting to commence a biometric capture process        representative of the prescriber to initiate the capture        process;    -   the management computer responding to the request to return a        message to the capture apparatus at a first instant in time, the        message containing a unique code, and where receipt of the        message containing the code at the capture apparatus causes        initiation of the capture process;    -   the management computer, after returning the message, receiving        a captured biometric representative of the person from the        capture apparatus coded with the code, at a second instant in        time; and    -   the management computer operating, when the second instant is        less than a predetermined time later than the first instant, to        decode the captured biometric and initiate a matching process to        find a match for the decoded captured biometric against stored        biometric records and to retrieve an identification code        representative of the prescriber when a match is found.

The step of identifying the supplier may include the steps of:

-   -   a management computer receiving a request, from capture        apparatus waiting to commence a biometric capture process        representative of the supplier to initiate the capture process;    -   the management computer responding to the request to return a        message to the capture apparatus at a first instant in time, the        message containing a unique code, and where receipt of the        message containing the code at the capture apparatus causes        initiation of the capture process;    -   the management computer, after returning the message, receiving        a captured biometric representative of the person from the        capture apparatus coded with the code, at a second instant in        time; and    -   the management computer operating, when the second instant is        less than a predetermined time later than the first instant, to        decode the captured biometric and initiate a matching process to        find a match for the decoded captured biometric against stored        biometric records and to retrieve an identification code        representative of the supplier when a match is found.

In a second aspect the invention is a computerised identity matchingmanagement system for the authorised supply of a pharmaceuticalsubstance to an authorised person, comprising:

-   -   a data depository for storing records which include, for each        person, at least the substance a person is prescribed, the        quantity in which the substance is to be supplied and the date        at which the substance is to be supplied;    -   a computer programmed to:        -   receive a request, from capture apparatus waiting to            commence a biometric capture process, to initiate the            capture process to identify a person who is requesting the            supply of a substance;        -   respond to the request to return a message to the capture            apparatus at a first instant in time, the message containing            a unique code, and where receipt of the message containing            the code at the capture apparatus causes initiation of the            capture process;        -   after returning the message, receiving a captured biometric            from the capture apparatus coded with the code, at a second            instant in time; and        -   when the second instant is less than a predetermined time            later than the first instant, to decode the captured            biometric;    -   an authentication server to perform a matching process to find a        match for the decoded captured biometric against stored        biometric records and to retrieve the identification code        representative of the person who is requesting the supply of a        pharmaceutical substance when a match is found, the server        further retrieving a date stamp and using the identification        code to retrieve the person's stored data record to determine        whether the date stamp matches the date at which the substance        is to be supplied, and if a match is determined updating the        person's stored data record relating to the supply of the        substance in the prescribed quantity to the person.

There are some forms of medication, for example methadone, the deliveryof which is strictly controlled. Generally it is the government thatplaces strict controls on the delivery of such products and the onus ison the dispenser to ensure that the product is only supplied to personswho are entitled to receive it, is only delivered in the dose that isprescribed, and is only delivered at pre-determined intervals. A furtherconstraint on the dispenser is the maintenance of dose changes,prescription expiry and general patient management issues. Furthermore,for many pharmacists, the delivery of methadone therapy to former drugaddicts is a time consuming and very stressful part of their businessbecause of the tight constraints, which are placed upon them and thepossible adverse results to the recipient if an incorrect drug orincorrect quantity is delivered, or if a drug is delivered to the personmore frequently that prescribed.

It is therefore, an advantage of at least one example of the inventionthat pharmaceutical substances are supplied to authorised persons in thecorrect doses and correct time periods.

A further advantage of at least one embodiment of the invention is thatthe individual's transformed biometric data and the individual's patientdata is logically separate. A further advantage of at least oneembodiment of the invention is that the identification of an individualis completed via an anonymous procedure. No information other than thecaptured biometric is required to perform a search of all enrolledpersons.

BRIEF DESCRIPTION OF DRAWINGS

An example of the system will now be described with reference to theaccompanying drawings; in which:

FIG. 1 is a schematic diagram of a system used to manage the supply of apharmaceutical substance to a patient; and

FIG. 2 is a flow chart showing the steps a patient seeks the supply of asubstance.

BEST MODE FOR CARRYING OUT THE INVENTION

FIG. 1 illustrates a system 100 used to manage the authorised supply ofMethadone to patients and to ensure that the right patient get theprescribed dose at the prescribed time. The system 100 includes an IrisRecognition client computer 115 which is programmed to receive andtransmit messages through a firewall 112 and over the Internet using theclient software 108. The software 108 resides in the PC 115. Thesoftware 108 works with PrivateID software 110 and an iris recognitioncamera 120 such as the Panasonic BM-ET300 which includes a speciallenses to photograph the eyes. The Authentication server 140 accepts theiris image(s) which is(are) sent from the client software 108. Prior tosending, the client software 108 ensures that the images are ofsufficient quality for processing by the Authentication Server 140. Inaddition, the server 140 confirms the image integrity and then sends itthrough the iris recognition process for verification against biometricrecords stored in its cache 145 which in turn is drawn from the securedatabase 148.

The Records Database Server 150 stores a patient database 160, aprescriber database 180 and a drug register database 190. The patientdatabase 160 include three sub records; patient details 165, anassessment record 170 and prescription details 175.

The patient and prescription details for each patient include:

-   -   a ‘name and address field’    -   a Customer Identification Number field (this number is the same        number that resides in the customers record within the        Authentication Server 140. It is linked to their biometric        templates),    -   a ‘create date field’    -   a prescription ‘issue date field’ which indicates the date at        which the prescription was prescribed. This field is important        as the duration period of some controlled substances is        determined by the date on which they were prescribed;    -   a prescription registration number    -   a ‘prescribed drug field’, to record one or more substances        prescribed to the particular patient;    -   a ‘strength &/or quantity field’ of each substance prescribed to        the particular patient;    -   a ‘frequency of treatment field’ which lists the dates, and if        necessary the times, at which the each prescribed drug may be        supplied to the particular patient;    -   a ‘drug supply received field’ which indicates the dates on        which the prescribed drug has been supplied; and    -   a ‘prescription duration field’ which specifies the date at        which supply of the prescribed drug is to cease. This date        corresponds to the last entry in the frequency of treatment        field.

The assessment record 170 is created each time a new patient is referredto a prescriber for participation on the Methadone program.

The prescriber database 180 includes:

-   -   a ‘name and address field’ of the prescriber    -   Customer Identification Number field (this number is the same        number that resides in the customers record within the        Authentication Server 140. It is linked to their biometric        templates for circumstances where the prescriber is required to        use iris recognition;    -   and a ‘create date field’ for when the prescriber prescribes a        prescription.

The patient 165, assessment 170 and prescription 175 records are linkedfor each patient.

The drug register database 190 includes the following fields:

-   -   quantity of methadone received;    -   the name and address of the supplier of the methadone received        into stock;    -   daily quantity of methadone supplied;    -   the name and address of the persons to whom methadone was        supplied by the pharmacy;    -   the original prescription reference number of each person to        whom methadone was supplied;    -   the name of the prescriber;    -   the balance of methadone in stock after each transaction;    -   the identity of the person making the entry.

In this example, some of the components of the system 100, namely the PC115, software 108, 110 and the Iris recognition camera 120 are installedon the client network 105, which could be a pharmacy or a clinic and thepremises of a prescriber. Other components of the system 100, namely theAuthentication Server 140, its cache 145 and the records server 150 withits associated databases, are installed on a server network 125 remotefrom the client network 105.

With regard to the pharmacists/clinical facilities, the PC 115 isaccessed by pharmacists or operators who have the authorisation todispense or supply methadone to patients. The camera 120 is used to atleast capture an iris image of a patient who presents themselves at thepharmacy for the supply of methadone.

FIG. 2 illustrates a flow chart which indicates the steps undertakenfrom when a patient approaches a Methadone prescriber, step 205, to whenthe prescribed methadone is dispensed to the patient, step 280. After apatient has approached the prescriber, the prescriber draws up anassessment form and assesses whether the patient qualifies for themethadone program, step 210. If the patient qualifies, then theprescriber proceeds to enrol the patient and a prescription is produced,or a referral to an authorised person (ie: a doctor) so that aprescription can be produced 215. The prescription includes details ofthe patient and the quantity and frequency of Methadone to be suppliedto that particular patient. If the premises of the prescriber are notbiometrically enabled, step 225 then the patient is required to take theprescription to a pharmacy at the required time 245 whereby the patientis verified in a traditional manner.

It is also possible to have an authorised operator scan in a hard copyof a prescription from another authorised source (eg: the patient'slocal doctor).

If the prescribers premises are biometrically enabled, step 220, thenthe step of enrolling the patient involves creating a record of thepatient in the patient database 160 of the record server 150 and ofcreating an enrolment record in the biometric database 148 of theAuthentication Server 140. At step 230, prescription details 175together with the patient's assessment form 170 are captured and areentered into the appropriate records of the patient's database 160. Thebiometric details of the patient are then captured, step 240.

Enrolling the Patient

Step (a). The client software 108 is launched and captures the PrivateID software 110 to take control of the camera 120 so as to record animage of the patients right and left irises.

Step (b). The client software 108 sends a message to the client computer105 for a message authentication code (MAC). The client 105 responds tothe request and issues a MAC. The client software 108 receives the MACand the Private ID software 110 commences capture of the patients iris.

Step (c). To use the Panasonic BM-ET300 camera 120, the patient movestheir head so that they can see both of their eyes in the mirror in thecentre of the camera head at a distance of approximately 43 to 48 cm (17to 19 inches) from the lens. The camera 120 sends images to the software108 running on the computer 115.

Step (d). The PrivateID software 110 captures a series of digital videoimages of the patients eyes. Image quality metrics within the clientsoftware 108 inspect the images for sufficient quality and iris contentto ensure high confidence for a successful match outcome. Once asatisfactory images have been culled, the software 108 provides afeedback signal to inform that the image capture session is complete,this usually issues within seconds. If a satisfactory image cannot becaptured within the allotted time (the default is set at 10 seconds),then the software provides an error signal. The patient would then haveto restart the process of having images of the iris captured.

Step (e). Once captured, the process of creating an iriscode templatesfor the patient begins. The PrivateID software 110 encrypts the capturedimage using an appropriate cryptographic algorithm. Then it compressesthe captured image, codes the compressed image using the previouslyissued MAC and assembles a message for transmission to the clientcomputer 105. This transmission is handled by client software 108.

Step (f). The authentication server 140 receives the message and checksit for validity using MAC, that is to ensure it has been received whilethe MAC is still valid. The message then has its integrity checked usinga checksum, and is decompressed and decrypted. It is then passed througha Daugman Algorithm, or similar, to create the iriscodes.

Step (g). The iriscodes are then sent to the authentication server cache145 to ensure that the records do not already exist (Fraud Check).Providing the records do not already exist, the IrisCode templates andunique customer identification record (and optional portrait image) areentered into the database 148 and the cache 145 is updated. TheAuthentication Server 140 ensures that the unique customeridentification number entered into the database 148 is correctlyassociated with the appropriate patient record 165 in database 160.

Biometric Capture for Supply of Methadone

At some later date, the patient approaches a pharmacy to request thesupply of the methadone, step 245. The patient is required to beidentified by iris recognition and proceeds to have their biometriccaptured, step 250.

Steps (a) to (f) of the patient admission are repeated. However step (g)in this circumstance is different. The recognition iriscode templatesare sent to the authentication server 140 which attempts to match itagainst all records in its secure cache 145. The authentication server140 returns a result to the client computer 105 which interprets theresult. If the result is a comparison failure, that result is logged andthe process stops, step 255. The pharmacist checks the frequency of thetreatment field to determine when the drug is prescribed to be supplied.The patient is informed of this date.

If a match is found, step 260, the result indicates that the patient hasbeen identified and the authentication server retrieves the relevantpatient record data step 265, and returns to the requesting application108. If the patient is authorised to receive the prescribed supply ofmethadone step 275, the pharmacist checks the quantity and strength ofthe drug and accordingly dispenses to the patient step 280. Should theclinic/pharmacy be equipped with an automated dispensing platform, thiswill then be used to dispense the correct amount of Methadone asrequired 130. The prescribed supply will be administered or packagedaccording to the information on the prescription. The supply of the drugis recorded in the ‘drug supply field’ of the patients record 160.

If the date and time stamp does not match the prescription details 270,the pharmacist checks the frequency of the treatment field to determinewhen the drug is prescribed to be supplied. The patient is informed ofthis date. The patient details 165 are updated to reflect theoccurrence, step 270.

It will be appreciated by persons skilled in the art that numerousvariations and/or modifications may be made to the invention as shown inthe specific embodiments without departing from the spirit or scope ofthe invention as broadly described. The present embodiments are,therefore, to be considered in all respects as illustrative and notrestrictive.

1. A computerised identity matching management process for the supply ofa pharmaceutical substance to an authorised person, the processcomprising the steps of: identifying a person who is requesting thesupply of the substance, comprising the steps of: a management computerreceiving a request, from capture apparatus waiting to commence abiometric capture process representative of the person to initiate thecapture process; the management computer responding to the request toreturn a message to the capture apparatus at a first instant in time,the message containing a unique code, and where receipt of the messagecontaining the code at the capture apparatus causes initiation of thecapture process; the management computer, after returning the message,receiving a captured biometric representative of the person from thecapture apparatus coded with the code, at a second instant in time; andthe management computer operating, when the second instant is less thana predetermined time later than the first instant, to decode thecaptured biometric and initiate a matching process to find a match forthe decoded captured biometric against stored biometric records and toretrieve an identification code representative of the person when amatch is found; retrieving a date stamp and using the identificationcode to retrieve a stored data record of the person which includes atleast a substance the person is prescribed, a quantity in which thesubstance is to be supplied and a date at which the substance is to besupplied; determining whether the date stamp matches the date at whichthe substance is to be supplied, and if a match is determined, supplyingthe substance in the prescribed quantity and recording information toform a record to update the supply of the substance to the person. 2.The process according to claim 1, where the biometric records aresecurely stored within the management computers cache.
 3. The processaccording to claim 1 or 2, where the stored data records are logicallyseparate from the biometric records.
 4. The process according to claim1, where the stored data records are physically separate from thebiometric records.
 5. The process according to claim 1, where thematching process includes generating a template image of the decodedcaptured biometric for matching against stored biometric records.
 6. Theprocess according to claim 5, where the stored biometric records includea biometric enrol template of the left iris, a biometric enrol templateof the right iris, and the identification code.
 7. The process accordingto claim 6, where the stored biometric records further include aportrait image of the person.
 8. The process according to claim 1, wherethe stored data records include a patient database and a prescriberdatabase.
 9. The process according to claim 8, where the stored datarecords further include a drug register database and a supplierdatabase.
 10. The process according to claim 1, further including thestep of enrolling a person into a program so that the person isauthorised to receive the substance.
 11. The process according to claim10, where the step of enrolling the person includes: a managementcomputer receiving a request, from capture apparatus waiting to commencea biometric capture process representative of the person to initiate thecapture process; the management computer responding to the request toreturn a message to the capture apparatus at a first instant in time,the message containing a unique code, and where receipt of the messagecontaining the code at the capture apparatus causes initiation of thecapture process; the management computer, after returning a message,receiving a captured biometric representative of the person from thecapture apparatus coded with the code, at a second instant in time; themanagement computer operating, when the second instant is less than apredetermined time later than the first instant, to decode the capturedbiometric; generating an identification code representative of theperson; and storing a biometric record of the person's capturedbiometric with the identification code.
 12. The process according toclaim 11, wherein prior to storing a biometric record of the capturedbiometric, the management computer performing a fraud check to ensurethe person is not already enrolled on the system.
 13. The processaccording to claim 11 or claim 12, wherein having decoded the capturedbiometric, the management computer transforming the captured biometricinto an enrolment template in order to store a biometric record of theperson's captured biometric.
 14. The process according to claim 1 or 11,where the predetermined time is determined according to the timerequired for the biometric capture process.
 15. The process according toclaim 1, where the substance is a controlled substance.
 16. The processaccording to claim 1 or 11, where the method further includes the stepof identifying a prescriber who is prescribing the substance comprisingthe steps of: a management computer receiving a request, from captureapparatus waiting to commence a biometric capture process representativeof the prescriber to initiate the capture process; the managementcomputer responding to the request to return a message to the captureapparatus at a first instant in time, the message containing a uniquecode, and where receipt of the message containing the code at thecapture apparatus causes initiation of the capture process; themanagement computer, after returning the message, receiving a capturedbiometric representative of the person from the capture apparatus codedwith the code, at a second instant in time; and the management computeroperating, when the second instant is less than a predetermined timelater than the first instant, to decode the captured biometric andinitiate a matching process to find a match for the decoded capturedbiometric against stored biometric records and to retrieve anidentification code representative of the prescriber when a match isfound.
 17. The process according to claim 1 or 11, where the methodfurther includes the step of identifying a supplier who supplies thesubstance to the person comprising the steps of: a management computerreceiving a request, from capture apparatus waiting to commence abiometric capture process representative of the supplier to initiate thecapture process; the management computer responding to the request toreturn a message to the capture apparatus at a first instant in time,the message containing a unique code, and where receipt of the messagecontaining the code at the capture apparatus causes initiation of thecapture process; the management computer, after returning the message,receiving a captured biometric representative of the person from thecapture apparatus coded with the code, at a second instant in time; andthe management computer operating, when the second instant is less thana predetermined time later than the first instant, to decode thecaptured biometric and initiate a matching process to find a match forthe decoded captured biometric against stored biometric records and toretrieve an identification code representative of the supplier when amatch is found.
 18. A computerised identity matching management systemfor the authorised supply of a pharmaceutical substance to an authorisedperson, comprising: a data depository for storing data records whichinclude, for each person, at least the substance a person is prescribed,the quantity in which the substance is to be supplied and the date atwhich the substance is to be supplied; a management computer programmedto: receive a request, from capture apparatus waiting to commence abiometric capture process, to initiate the capture process to identify aperson who is requesting the supply of a substance; respond to therequest to return a message to the capture apparatus at a first instantin time, the message containing a unique code, and where receipt of themessage containing the code at the capture apparatus causes initiationof the capture process; after returning the message, receiving acaptured biometric from the capture apparatus coded with the code, at asecond instant in time; and when the second instant is less than apredetermined time later than the first instant, to decode the capturedbiometric; an authentication server to perform a matching process tofind a match for the decoded captured biometric against stored biometricrecords and to retrieve the identification code representative of theperson who is requesting the supply of a pharmaceutical substance when amatch is found, the server further retrieving a date stamp and using theidentification code to retrieve the person's stored data record todetermine whether the date stamp matches the date at which the substanceis to be supplied, and if a match is determined updating the person'sstored data record relating to the supply of the substance in theprescribed quantity to the person.
 19. The system according to claim 18,where the data records stored in the data depository are logicallyseparate from the biometric records.
 20. The system according to claim18 or claim 19, where the data records stored in the data depository arephysically separate from the biometric records which are stored withinthe management computers cache.
 21. The system according to claim 18,where the stored data records include a patient database and aprescriber database.
 22. The system according to claim 21, where thestored data records further include a drug register database and asupplier database.
 23. The system according to claim 18, furthercomprising a privacy protection layer between the management computerand at least the capture apparatus.